Shescape is a simple shell escape library for JavaScript. An attacker may be able to get read-only access to environment variables. This bug has been patched in version 1.7.1.
The product uses an environment variable to store unencrypted sensitive information.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Shescape | Shescape_project | * | 1.7.1 (excluding) |